+ Post New Thread
Results 1 to 12 of 12
Windows 7 Thread, Block USB for entire school in Technical; Hi, I'm thinking about blocking usb drives and thought I ask you all if you block USB drives and if ...
  1. #1
    RobD's Avatar
    Join Date
    Mar 2007
    Posts
    98
    Thank Post
    0
    Thanked 8 Times in 8 Posts
    Rep Power
    16

    Post Block USB for entire school

    Hi,

    I'm thinking about blocking usb drives and thought I ask you all if you block USB drives and if so how?

    I'm thinking about blocking via GPO but have used device wall but not sure if it would be best in a School environment.

    Thanks

    Rob

  2. #2
    StevieM's Avatar
    Join Date
    Apr 2013
    Location
    Liverpool
    Posts
    758
    Thank Post
    305
    Thanked 329 Times in 217 Posts
    Rep Power
    79
    I would be strung up if I even mentioned the idea of blocking USB drives for staff. I have to rely on up-to-date AV and UAC.

  3. #3
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,774
    Thank Post
    213
    Thanked 263 Times in 213 Posts
    Rep Power
    67
    I block mine via GPO for all curriculum machines. if a pupil needs a file he can use the VLE or email. or in the worst case bring it to me. Teachers and admin still have use access.

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    You will need to take into account that Windows will class a digital camera (mayabe memory cards as well) as a USB device.

  5. #5
    RichCowell's Avatar
    Join Date
    Dec 2005
    Location
    PR7, Lancashire
    Posts
    437
    Thank Post
    62
    Thanked 70 Times in 61 Posts
    Rep Power
    29
    I use Impero Software) to block things like USB - you can do it for specific users / groups (rooms)...

    Works nicely, though quite expensive if you don't need all the other many features...

  6. #6

    Join Date
    Mar 2010
    Location
    Leeds
    Posts
    418
    Thank Post
    77
    Thanked 46 Times in 41 Posts
    Rep Power
    17
    The senior technician blocked USB drives in my previous school using a combination of sophos endpoint and USBDLM's password facility. Was always abit of a pain especially if us technicians wanted to use our memory sticks as we had 2 levels of block to bypass. USBDLM only allowed about 10 exceptions in it's .ini file too so for certain people who we allowed access to devices we were limited. As mentioned above memory card readers were blocked, printers with memory card readers built in became a problem and sound recorders for oral exams. You would then need to provide some sort of solution for staff to transfer files from work to home and vice versa (for this we used home access+), and you always get certain staff members who have gigabytes of files that they MUST have so it gave us a whole load of extra work transferring files for them (only after virus scanning the drives) which took an age. :-)

  7. #7

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,709
    Thank Post
    351
    Thanked 1,268 Times in 866 Posts
    Blog Entries
    4
    Rep Power
    1124
    Use USB Drive Letter Manager for Windows to ensure that they get USB drive letters that you want them to have and then use Group Policy to make those drive letters inaccessible to targeted users?

    Link: USB Drive Letter Manager - USBDLM

  8. #8
    RobD's Avatar
    Join Date
    Mar 2007
    Posts
    98
    Thank Post
    0
    Thanked 8 Times in 8 Posts
    Rep Power
    16
    Thanks all, appreciate the help. We have impero but must admit didnt realise you could block USBs with it.

    We havnt discussed it with staff yet so to be honest its a bit of a fact finding missing but you've all provided some great advice. Thanks

  9. #9
    Valyyn's Avatar
    Join Date
    Jun 2011
    Location
    Portsmouth
    Posts
    201
    Thank Post
    21
    Thanked 61 Times in 43 Posts
    Rep Power
    54
    If it helps, click on the group of students (or Entire Network), then on the Group tab up top is Disable USB Storage. Really handy

  10. #10

    Join Date
    Sep 2008
    Location
    Herts
    Posts
    45
    Thank Post
    17
    Thanked 4 Times in 4 Posts
    Rep Power
    12
    We block usbs at our school using sophos enterprise console. We block all curriculum machines but allow our admin, teacher and iwb machines. You can block groups of computers and admins can still use usbs on machines that are blocked. Works really well

  11. #11

    Join Date
    Mar 2012
    Location
    London
    Posts
    15
    Thank Post
    2
    Thanked 5 Times in 3 Posts
    Rep Power
    5
    We also have USB's blocked for students but we allow teachers to use USBs.. Just got Ranger Portico working so students can access their mapped drive from the Internet so they can download their files to their computers or upload documents to their mapped drive.

  12. #12
    Mr_Jiminy's Avatar
    Join Date
    Nov 2011
    Location
    Newcastle Upon Tyne
    Posts
    210
    Thank Post
    21
    Thanked 7 Times in 6 Posts
    Rep Power
    7
    Quote Originally Posted by chazzy2501 View Post
    I block mine via GPO for all curriculum machines. if a pupil needs a file he can use the VLE or email. or in the worst case bring it to me. Teachers and admin still have use access.
    How is this done via GPO? Does it depend of the age of the server OS?

SHARE:
+ Post New Thread

Similar Threads

  1. DLNA Server for heavy use throughout the entire school
    By prad in forum AV and Multimedia Related
    Replies: 1
    Last Post: 8th April 2011, 11:31 AM
  2. Replies: 32
    Last Post: 24th March 2010, 06:23 PM
  3. managing whitelist for entire school?
    By Flakes in forum Internet Related/Filtering/Firewall
    Replies: 5
    Last Post: 30th November 2009, 09:21 AM
  4. Blocking usb devices for students
    By Neville in forum Windows
    Replies: 1
    Last Post: 13th February 2009, 12:14 PM
  5. A quick heads up for Lancashire schools
    By Dos_Box in forum General EduGeek News/Announcements
    Replies: 2
    Last Post: 7th November 2005, 05:59 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •